This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Serbian authorities, specifically the BIA, used Cellebrite's forensic tools to bypass security on the mobile devices of journalists and activists. Once unlocked, the authorities installed a custom spyware called 'NoviSpy' to conduct covert surveillance, including remote camera and microphone activation. This campaign targeted civil society members to suppress dissent and monitor political activities.
Serbian authorities allegedly used Cellebrite’s AI-powered forensic tools to unlock journalists’ and activists’ phones without consent. They reportedly then installed NoviSpy, a newly discovered spyware. That then purportedly allowed covert data extraction, remote microphone and camera activation, and surveillance. Amnesty International uncovered forensic evidence linking Serbia’s Security Information Agency (BIA) to these attacks. Cellebrite halted sales to Serbia after the report.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to conduct large-scale disinformation campaigns, malicious surveillance, or targeted and sophisticated automated censorship and propaganda, with the aim of manipulating political processes, public opinion, and behavior.
Also classified as
The tools were used to bypass device encryption and extract highly sensitive personal data, including private messages, photos, and contacts.
The campaign relied on exploiting zero-day vulnerabilities in Android USB kernel drivers and Qualcomm chipsets to bypass security mechanisms.
The BIA used Cellebrite and NoviSpy to conduct a coordinated, state-level covert surveillance campaign targeting journalists and activists to suppress political dissent.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by the intentional decision of Serbian authorities to use forensic tools and spyware to target civil society members after the technology was deployed.
Added categories peak at 2: Minor (Psychological Harm, Direct)
Serbian state authorities used Cellebrite forensic tools to exploit hardware zero-day vulnerabilities, bypassing device security to install custom NoviSpy spyware on journalists and activists. This coordinated domestic surveillance campaign represents a substantial threat to societal stability, human rights, and intelligence security within Serbia, highlighting the evolving risks of state-sponsored digital repression.
The AI systems involved, Cellebrite UFED and NoviSpy, operate as tools that perform specific, deterministic functions like bypassing encryption and extracting data based on direct human commands.
High Risk: The system is used in law enforcement and intelligence applications, which have significant implications for fundamental rights and are subject to strict regulatory requirements.
The primary goal of the combined technologies was to bypass security to conduct covert surveillance and extract private data from targeted individuals.
The reports from Amnesty International provide highly detailed technical forensic evidence, specific CVE identifiers, and direct testimonies from affected individuals, leaving very little ambiguity about the events.
None, as the forensic evidence directly links the BIA and the use of Cellebrite tools to the spyware installations.
Technology
USB Driver Zero-Day Exploits
Exploited vulnerabilities in USB drivers to bypass Android security.
Bypassing Device Encryption
Cellebrite UFED unlocked devices without requiring user passcodes.
NoviSpy Android Spyware
Custom spyware allowed remote activation of camera and microphone.
Data Inputs
Device Forensic Log Data
Analysis of device logs revealed Cellebrite exploit traces on phones.
Human Factors
Deceptive Police Tactics
Authorities deceived targets to surrender phones under false pretexts.
Lack of Owner Consent
Devices were searched without the owners' knowledge or legal consent.
Process and Methods
Combining Forensics and Spyware
Cellebrite was used to unlock phones to facilitate spyware installation.
Inadequate Due Diligence
UNOPS and Norway failed to assess human rights risks of donating tools.
Lack of End-User Verification
Cellebrite did not verify if clients used tools for lawful purposes.
Management
Inadequate Corporate Oversight
Cellebrite failed to monitor product use by repressive regimes.
Ignoring Misuse Warnings
Sales continued to Georgia despite known human rights risks.
Regulatory Environment
Weak Digital Surveillance Laws
Serbia's legal framework lacks safeguards against advanced surveillance.
Lack of Judicial Oversight
Surveillance tools were deployed without strict legal controls.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
